torsten/harheimertc
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Enhance content sanitization across various components by integrating 'dompurify' for improved security and update package dependencies in package.json and package-lock.json.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 4m56s
Details

Browse Source
This commit is contained in:
Torsten Schulz (local)
2025-12-20 10:49:20 +01:00
parent acfa842131
commit 316cce1b26
49 changed files with 349 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
pages/cms/newsletter.vue
View File

@@ -168,7 +168,7 @@
</div>
<div
class="text-sm text-gray-600 prose prose-sm max-w-none mb-3"
v-html="post.content.substring(0, 200) + (post.content.length > 200 ? '...' : '')"
v-html="useSanitizeHtml(post.content.substring(0, 200) + (post.content.length > 200 ? '...' : ''))"
/>
<!-- Empfängerliste (collapsible) -->
@@ -770,6 +770,7 @@
import { ref, computed, onMounted } from 'vue'
import { Plus, Loader2, Users, Trash2 } from 'lucide-vue-next'
import RichTextEditor from '~/components/RichTextEditor.vue'
import { useSanitizeHtml } from '~/composables/useSanitizeHtml'
const authStore = useAuthStore()

11
pages/verein/geschichte.vue
View File

@@ -13,9 +13,12 @@
</template>
<script setup>
import { ref, onMounted } from 'vue'
import { ref, onMounted, computed } from 'vue'
import { useSanitizeHtml } from '~/composables/useSanitizeHtml'
const content = ref('')
const rawContent = ref('')
const content = computed(() => useSanitizeHtml(rawContent.value))
useHead({
title: 'Geschichte - Harheimer TC',
@@ -24,9 +27,9 @@ useHead({
async function loadConfig() {
try {
const data = await $fetch('/api/config')
content.value = data?.seiten?.geschichte || ''
rawContent.value = data?.seiten?.geschichte || ''
} catch (e) {
content.value = ''
rawContent.value = ''
}
}

11
pages/verein/satzung.vue
View File

@@ -43,11 +43,14 @@
</template>
<script setup>
import { ref, onMounted } from 'vue'
import { ref, onMounted, computed } from 'vue'
import { useSanitizeHtml } from '~/composables/useSanitizeHtml'
const content = ref('')
const rawContent = ref('')
const pdfUrl = ref('')
const content = computed(() => useSanitizeHtml(rawContent.value))
useHead({
title: 'Satzung - Harheimer TC',
})
@@ -57,11 +60,11 @@ async function loadConfig() {
const data = await $fetch('/api/config')
const satzung = data?.seiten?.satzung
if (satzung) {
content.value = satzung.content || ''
rawContent.value = satzung.content || ''
pdfUrl.value = satzung.pdfUrl || ''
}
} catch (e) {
content.value = ''
rawContent.value = ''
pdfUrl.value = ''
}
}

11
pages/verein/tt-regeln.vue
View File

@@ -13,9 +13,12 @@
</template>
<script setup>
import { ref, onMounted } from 'vue'
import { ref, onMounted, computed } from 'vue'
import { useSanitizeHtml } from '~/composables/useSanitizeHtml'
const content = ref('')
const rawContent = ref('')
const content = computed(() => useSanitizeHtml(rawContent.value))
useHead({
title: 'TT-Regeln - Harheimer TC',
@@ -24,9 +27,9 @@ useHead({
async function loadConfig() {
try {
const data = await $fetch('/api/config')
content.value = data?.seiten?.ttRegeln || ''
rawContent.value = data?.seiten?.ttRegeln || ''
} catch (e) {
content.value = ''
rawContent.value = ''
}
}

11
pages/verein/ueber-uns.vue
View File

@@ -13,9 +13,12 @@
</template>
<script setup>
import { ref, onMounted } from 'vue'
import { ref, onMounted, computed } from 'vue'
import { useSanitizeHtml } from '~/composables/useSanitizeHtml'
const content = ref('')
const rawContent = ref('')
const content = computed(() => useSanitizeHtml(rawContent.value))
useHead({
title: 'Über uns - Harheimer TC',
@@ -24,9 +27,9 @@ useHead({
async function loadConfig() {
try {
const data = await $fetch('/api/config')
content.value = data?.seiten?.ueberUns || ''
rawContent.value = data?.seiten?.ueberUns || ''
} catch (e) {
content.value = ''
rawContent.value = ''
}
}